PkgRadar

Package evidence

@mkbabb/[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Versions published
20
First published
Apr 2026
Publisher
mkbabb

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarballAdd to CI gate
Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@mkbabb/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@mkbabb/[email protected]"],"fail_on":"review"}'
Publishermkbabb
Artifact bytes936,922
Previous version3.11.0
Published2026-06-10T21:10:44.084Z
SHA-2566603a79d89c231f77712726b8a4455fdcafe6fdc122a00091abf6d0ab162ed0c

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low
Last checked
lowRisk
0Score
3.11.1Version
Status history (1 event)
  1. new → available · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts187
  • audit:stashnode scripts/audit-stash-list.mjs
  • buildvite build && npm run emit-types
  • build:watchvite build --watch
  • devvite
  • emit-typesvue-tsc --project tsconfig.build.json && node scripts/flatten-subpath-types.mjs
  • gates:emit-cinode scripts/gates.mjs --emit-ci
  • gates:verify-cinode scripts/gates.mjs --verify-ci
  • iternpm run iter-check && npm run iter-build && npm run iter-test
  • iter-buildvite build --config vite.iter.config.ts
  • iter-checkvue-tsc --noEmit --project tsconfig.src.json
  • iter-testvitest run --reporter=verbose
  • iter-test-watchvitest --watch
  • preparenode scripts/install-hooks.mjs && (test -f dist/glass-ui.js -a -f dist/index.d.ts || npm run build)
  • prepublishOnlynpm run build && npm test
  • profile:auroranode scripts/profile-aurora.mjs
  • profile:budgetnode scripts/profile-bundle.mjs --enforce
  • profile:bundlenode scripts/profile-bundle.mjs
  • proof:adaptive-glassnode scripts/proof-adaptive-glass.mjs
  • proof:allnode scripts/gates.mjs --run local
  • proof:animation-coherencenode scripts/proof-animation-coherence.mjs
  • proof:au-finalnode scripts/proof-au-final.mjs
  • proof:au-w0-regroundnode scripts/proof-au-w0-reground.mjs
  • proof:au-w1-designnode scripts/proof-au-w1-design.mjs
  • proof:au-w9-consumersnode scripts/proof-au-w9-consumers.mjs
  • proof:aur2-residuenode scripts/proof-aur2-residue.mjs
  • proof:aurora-arrestingnode scripts/proof-aurora-arresting.mjs
  • proof:aurora-arresting-refnode scripts/aurora-arresting-metric.mjs tests-visual/fixtures/starry-night-crop.png
  • proof:aurora-atoms-rendernode scripts/proof-aurora-atoms-render.mjs
  • proof:aurora-atoms-roundtripnode scripts/proof-aurora-atoms-roundtrip.mjs
  • proof:aurora-chrome-idiomaticnode scripts/proof-aurora-chrome-idiomatic.mjs
  • …and 157 more.